Monitor device, base station, monitoring method, control method, and non-transitory computer readable medium

Abstract

An object is to provide a monitor device capable of reducing threat of DoS attacks on a mobile network. A monitor device ( 10 ) according to the present invention includes a signal monitor unit ( 11 ) for estimating a specific base station communicating with a communication terminal ( 30 ) attacking a mobile network according to the number of times an ATTACH procedure is rejected, in which the ATTACH procedure is for registering information about a communication terminal ( 30 ) communicating with a base station ( 20 ) in a communication device ( 40 ) located in the mobile network, and a base station control unit ( 12 ) for causing the specific base station to determine whether to execute the ATTACH procedure related to a communication terminal served by the specific base station according to communication terminal identification information set in a signal transmitted from the communication terminal served by the specific base station.

1 .- 14 . (canceled) 
     
     
         15 . A communication method of a first network node in a mobile communication system comprising a second network node, and a User Equipment (UE), the communication method comprising:
 receiving, from the second network node, a first message including information to enable identification of the UE as a UE performing a Denial of Service (DoS) attack;   analyzing the received information; and   sending, to the second network node, a second message based on the analysis to avoid a threat of the UE performing the DoS attack.   
     
     
         16 . A first network node in a mobile communication system comprising a second network node, and a User Equipment (UE), the first network node comprising:
 at least one memory storing instructions; and   at least one processor configured to execute the instructions to:
 receive, from the second network node, a first message including information to enable identification of the UE as a UE performing a Denial of Service (DoS) attack, 
 analyze the received information, and 
 send, to the second network node, a second message based on the analysis to avoid threat of the UE performing the DoS attack.